What is Claimed is: 

[cl] A method of operating a content distribution network switch in a content 

distribution network comprising the steps of; 

receiving a packet from a client associated with a secure 
communication connection; 

extracting information from the packet to Identify a cache server in 
the content distribution network that has state information on the 
secure communication connection; and 
directing the packet towards the identified cache server. 

[c2] The invention of claim 1 wherein the information extracted from the packet 

comprises a session identifier used to compute a label identifying the cache 
server. 

[c3] The invention of claim 2 wherein the label identifying the cache server is 

computed from the session identifier by a function f(SID) where SID is the 
session Identifier. 

[c4] The invention of claim 3 wherein the function f(SID) = SID MOD n + 1 

where n is the number of cache servers that can store the state information 
on the secure communication connection. 

[c5] The invention of claim 4 wherein the secure communication connection is a 

Secure Sockets Layer connection. 

[c6] The invention of claim 1 wherein the information extracted from the packet 

comprises a client address which is associated with a cache server. 

[c7] The invention of claim 6 wherein associations between client address and 

cache server are stored in a table. 

[c8] The invention of claim 7 wherein the secure communication connection is a 

Secure Sockets Layer connection. 

[c9] The invention of claim 6 wherein associations between client address and 

cache server are generated by a hash function. 

[clO] The invention of claim 9 wherein the secure communication connection is a 

Secure Sockets Layer connection. 
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[cl 1] A method of operating a cache server in a content distribution network 

comprising the steps of: 

selecting a session identifier that may be utilized by a content 
distribution network switch to direct packets associated with a secure 
communication connection to the cache server; and 
negotiating a secure communication connection with a client. 

[cl 2] The invention of claim 1 1 wherein the session identifier can be used to 

compute a label identifying the cache server using a function f(SID) where 
SID is the session identifier. 

[cl 3] The invention of claim 1 2 wherein the function f(SID) = SID MOD n -f- 1 

where n is the number of cache servers that can store the state information 
on the secure communication connection. 

[cl4] The invention of claim 1 3 wherein the secure communication connection is 

a Secure Sockets Layer connection. 

[cl 5] A method of operating a cache server in a content distribution network 

comprising the steps of: 

negotiating a secure communication connection with a client; 
creating state information necessary for reuse of the secure 
communication connection with the client; 

sharing the state information with other cache servers in the content 
distribution network to which client requests may be redirected. 

[cl6] The invention of claim 15 wherein the secure communication connection is 

a Secure Sockets Layer connection. 
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